← CVE Intelligence

CVE-2022-0255

Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection PUBLISHED

Description (CNA)

The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue

Affected (CNA)

Vendor / productVersions
Unknown / Database Backup for WordPressaffected 2.5.1 before 2.5.1

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.